General
- Target fiscal-49T4MO.zip
- Size 1KB
- Sample260803-qxtkfaad56
- SHA256 4c6d12f73882d1dd3314ce8a31a73b8eebf5e620d5e101b12ff1546cccd79b0b
- MD5 03c9f7561ce0742a55ae55b4d02f98ef
- SHA1 34a1c0d3652532368b4a102e43c399a7190828b3
- SHA512 c1301f641b33d714c5e61a6f847e471603dc193a8dc03fe6f858468df178aa8004d52e1aea9b66b3f255e1f12afd2171626d592de371cf6e522e67e880c73534
- TLSH T13121A7BFA3141868C47E15346C2A7CE09C59C917AA87A52A24FE56CB36117806A51B68
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fiscal-49T4MO.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
fiscal-49T4MO.hta
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target fiscal-49T4MO.hta
- Size 2KB
- SHA256 8577b25e2a6774c7a8a37a5cf16280cc736b201b0d7e93e4973e4be9b9997bd0
- MD5 5a68ac0216cc2acf19f944f8502acc7c
- SHA1 e0dd684a5ca85c31af96de263f1df552162d6f8e
- SHA512 e42b77d4f8897564fea2292187a28465194f06b91b0d381bb2ba90b81f398a065966f4f52004a497fd6cfb510a5868b363f24cc134fc1582f98c73c313a28660
- TLSH T1555126FBB94252C2BC329AAB6A2F508C149417422366D4F8F6D7DD40EF9CE1D80747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.